Formal verification of application-specific security properties in a model-driven approach

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5965 LNCS, Issue , 2010, Pages 166-181

  Moebius, Nina ^a   Stenzel, Kurt ^a   Reif, Wolfgang ^a  

^a UNIVERSITY OF AUGSBURG   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION-SPECIFIC; CRITICAL APPLICATIONS; CRITICAL SYSTEMS; CRYPTOGRAPHIC PROTOCOLS; E-COMMERCE APPLICATIONS; ERROR PRONES; EXECUTABLE CODES; FORMAL SPECIFICATION; FORMAL VERIFICATIONS; MODEL DRIVEN APPROACH; SECURITY PROPERTIES; UML MODEL; VERIFICATION METHOD;

COMPUTER SOFTWARE; CRYPTOGRAPHY; FORMAL LOGIC; NETWORK SECURITY;

NETWORK PROTOCOLS;

EID: 77949466195     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-11747-3_13     Document Type: Conference Paper

References (20)

1. [BAN90] Burrows, M., Abadi, M., Needham, R.: A logic of authentication. ACM Transactions on Computer Systems 8(1), 18-36 (1990)
2. [Bel01] Bella, G.: Mechanising a Protocol for Smart Cards. In: Attali, S., Jensen, T. (eds.) E-smart 2001. LNCS, vol. 2140, p. 19. Springer, Heidelberg (2001)
3. [Bla09] Blanchet, B.: Automatic Verification of Correspondences for Security Protocols. Journal of Computer Security 17(4), 363-434 (2009)
4. [BMP06] Bella, G., Massacci, F., Paulson, L.C.: Verifying the SET purchase protocols. Journal of Automated Reasoning 36(1-2), 5-37 (2006)
5. [BMV05] Basin, D.A., Mödersheim, S., Viganò, L.: OFMC: A symbolic model checker for security protocols. Int. J. Inf. Sec. 4(3), 181-208 (2005)
6. +00] Balser, M., Reif, W., Schellhorn, G., Stenzel, K., Thums, A.: Formal system development with KIV. In: Maibaum, T. (ed.) FASE 2000. LNCS, vol. 1783, p. 363. Springer, Heidelberg (2000)
7. [BS03] Börger, E., Stärk, R.F.: Abstract State Machines - A Method for High-Level System Design and Analysis. Springer, Heidelberg (2003)
8. [DY81] Dolev, D., Yao, A.C.: On the security of public key protocols. In: Proc. 22th IEEE Symposium on Foundations of Computer Science. IEEE, Los Alamitos (1981)
9. [HGRS07] Haneberg, D., Grandy, H., Reif, W., Schellhorn, G.: Verifying Smart Card Applications: An ASM Approach. In: Davies, J., Gibbons, J. (eds.) IFM 2007. LNCS, vol. 4591, pp. 313-332. Springer, Heidelberg (2007)
10. [Jan05] Jürjens, J.: Secure Systems Development with UML. Springer, Heidelberg (2005)
11. [Jür04] Jürjens, J.: Developing high-assurance secure systems with UML: a smartcard-based purchase protocol. In: IEEE International Symposium on High Assurance Systems Engineering (2004)
12. [JW08] Jones, C., Woodcock, J. (eds.): Formal Aspects of Computing, vol. 20 (1). Springer, Heidelberg (2008)
13. [Low96] Lowe, G.: Breaking and Fixing the Needham-Schroeder Public-Key Protocol Using FDR. In: Margaria, T., Steffen, B. (eds.) TACAS 1996. LNCS, vol. 1055, pp. 147-166. Springer, Heidelberg (1996)
14. [Mea96] Meadows, C.: The NRL protocol analyzer: An overview. Journal of Logic Programming 26(2), 113-131 (1996)
15. [MSGR09] Moebius, N., Stenzel, K., Grandy, H., Reif, W.: SecureMDD: A Model-Driven Development Method for Secure Smart Card Applications. In: Third International Workshop on Secure Software Engineering, SecSE, at ARES 2009. IEEE Press, Los Alamitos (2009)
16. [MSR08] Moebius, N., Stenzel, K., Reif, W.: Modeling Security-Critical Applications with UML in the SecureMDD Approach. International Journal on Advances in Software 1(1) (2008)
17. [MSR09] Moebius, N., Stenzel, K., Reif, W.: Generating Formal Specifications for Security-Critical Applications - A Model-Driven Approach. In: ICSE 2009 Workshop: International Workshop on Software Engineering for Secure Systems (SESS 2009). IEEE/ACM Digital Libary (2009)
18. [Pau98] Paulson, L.C.: The Inductive Approach to Verifying Cryptographic Protocols. J. Computer Security 6 (1998)
19. [PM08] Lopez Pimental, J.C., Monroy, R.: Formal support to security protocol development: A survey. Computacion y Sistemas 12(1) (2008)
20. [Woo06] Woodcock, J.: First Steps in the Verified Software Grand Challenge. IEEE Computer 39(10), 57-64 (2006)